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DEVICE FOR AUTHENTICATING DIGITAL IMAGES 



The present invention relates to a device for 
authenticating digital images. 
5 The invention applies more particularly to the 

authenticating of digital images emanating from a 
picture taking apparatus such as, for example, a camera 
head or a photographic apparatus. 

Digital images are falsifiable images. Thus 
10 are, for example, digital images constituting a news 
report or a television transmission, whether these 
images are broadcast live or from a source of recorded 
data . 

People to whom digital images are sent 
15 therefore find themselves in a situation where the 
authenticity of the information which they receive is 
not guaranteed. This drawback is all the more 
significant with the proliferation of sources of 
information such as, for example, the sources of 
20 information originating from journalists commonly 
referred to as "freelance" journalists. To avoid this 
drawback, processes for authenticating digital images 
have been proposed, in particular in the patent 
US 5,499,294. These processes make it possible to 
25 authenticate the picture taking apparatus itself but 
not the journalist or the cameraman. 

The purpose of the invention is to remedy this 
drawback. 

The present invention relates to a device for 
30 authenticating the taking of pictures made up of 
digital data comprising a picture taking apparatus and 
a security element carrying out the signing of at least 
part of the digital data, characterized in that the 
security element is a detachable element comprising a 
35 decryption circuit with secret key Kl, this element 
being connected to* the picture taking apparatus by an 
interface circuit provided in the picture taking 
apparatus . 
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Other advantages and characteristics of the 
invention will become apparent on .reading a preferred 
embodiment given with reference to the hereto appended 
figures in which: 

- Figure 1 represents a first picture taking 
device allowing the authentication of digital images 
according to the preferred embodiment of the invention; 

- Figure 2 represents a second picture taking 
device allowing the authentication of digital images 
according to the preferred embodiment of the invention; 

- Figure 3 represents , according to the 
invention, a device for authenticating the digital 
images emanating from a picture taking device such as 
that represented in Figure 1 or in Figure 2. 

In all the figures, the same labels designate 
the same elements. 

Figure 1 represents a first picture taking 
device allowing the authentication of digital images 
according to the preferred embodiment of the invention. 

The picture taking device consists of a picture 
taking apparatus 1 and of a detachable security element 
2. The picture taking apparatus 1 can be, for example, 
a camera head or a photographic apparatus. According to 
the preferred embodiment of the invention, the 
detachable security element is a chip card. 

The picture taking apparatus 1 comprises an 
objective 3, a block 4 of circuits for processing the 
signal emanating from the objective 3, a hashing 
circuit 5, a multiplexer 6 and a circuit 7 for 
interfacing with the chip card. 

In a manner known per se f the objective 3 and 
the block 4 of processing circuits make it possible to 
transform a light signal L into a digital signal VN. 

According to the invention, a fraction Fl(VN) 
of the digital signal VN is tapped off, preferably in a 
regular manner, at the output of the block 4. Each 
fraction F1{VN) tapped off is sent to the hashing 
circuit 5. The circuit 5 can be an electronic circuit 
or a software element. By way of nonlimiting examples. 
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the fraction Fl(VN) of the digital signal VN can be 
made up of the even or odd lines of the same image or 
of the data relating to the luminance component of the 
same image. The fraction Fl (VN) can also be made up of 
several frames tapped off at regular time intervals in 
the case of a camera head or image by image in the case 
of a photographic apparatus. In a general manner, the 
datum Fl(VN) is made up of significant data of an 
image. 

The result ml emanating from the function for 
hashing the signal Fl(VN) is sent to the interface 
circuit 7. The datum ml comprises, for example, a few 
tens of bits. 

The interface circuit 7 allows the 
bidirectional transfer of data between the apparatus 1 
and the chip card 2. Preferably, the circuit 7 is a 
bidirectional serial interface circuit to the ISO-7816 
standard. 

The chip card contains a decryption circuit 
(not represented in the figure) as well as a secret key 
Kl. Preferably, the key Kl is stored in a programmable 
memory contained in the card 2. Under the action of the 
key Kl, the successive data ml sent to the card 2 are 
decrypted by the decryption circuit so as to constitute 
a string of data D(ml) K i- Each datum D(ml) K i constitutes 
the signature of the datum ml and hence of the fraction 
Fl(VN) from which the datum ml emanated. 

By way of the interface circuit 7, the data 
D(ml) K i are sent from the chip card 2 to a first input 
of the multiplexer 6 which receives, in addition, the 
digital signal VN on a second of its inputs. 

The signal SI emanating from the multiplexer 6 
is then made up of the digital data VN and of the data 
D(ml} K1 . Preferably, each datum D(ml) K i is inserted into 
a header associated with the fraction of datum Fl (VN) 
which corresponds thereto. According to another 
embodiment of the invention, the data D(ml) K i are 
substituted for some of the data VN which are then 
lost. 
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Figure 2 represents a second picture taking 
device allowing the authentication of digital images 
according to the preferred embodiment of the invention. 

The picture taking device consists of a picture 
5 taking apparatus 8 and of a detachable security element 
9, for example, a chip card. The apparatus 8 can be, 
for example, a camera head or a photographic apparatus. 
The apparatus 8 contains the same circuits as the 
apparatus 1 described in Figure 1 with the exception of 

10 the hashing circuit 5. 

According to the embodiment of Figure 2, the 
hashing function is carried out in the chip card 9. 
From this it follows that the fraction Fl(VN) of the 
digital signal VN is sent to the chip card 9. 

15 As mentioned hereinabove, the hashing of the 

datum Fl(VN) generates a datum ml which, decrypted, 
generates a datum D(ml) K i. By way of the interface 
circuit 7 the successive data D(ml) K i are sent from the 
chip card 9 to the multiplexer 6. The signal SI 

20 emanating from the picture, taking apparatus 8 is then 
generated as mentioned earlier. 

A picture taking device according to the 
invention operates with decryption keys Kl having 
different values. One and the same key Kl can then be 

25 specific to one person or to a set of people 
constituting, for example, a collection of journalists. 
From this it follows that an advantage of the invention 
is that it guarantees the origin of the authenticated 
images . 

30 In accordance with the invention, the chip card 

provides for a personal key function whose key is 
secret. Moreover, the use of a chip card implies the 
implementation of a procedure of mutual identification 
between the chip card and the device receiving the chip 

35 card, namely the picture taking apparatus. From this it 
follows that the security level relating to the various 
steps implemented in the chip card and the picture 
taking device is a high security level. 



- 5 - 

Figure 3 represents, according to the 
invention, a device for authenticating digital images 
emanating from a picture taking device such as that 
represented in Figure 1 or in Figure 2. 
5 The device 10 for authenticating digital images 

comprises a demultiplexer ll f an encryption circuit 12 
with public key K2, a hashing circuit 13 and a 
comparator 14. The demultiplexer 11 receives on its 
input a signal SI such as that mentioned in Figures 1 
10 and 2, The signal SI originates either from a picture 
taking device such as that described in Figures 1 and 
2, or from a source of recorded data such as, for 
example, a magnetic tape, a digital video disc or else 
a diskette. 

15 The function of the demultiplexer 11 is to 

separate the data D(ml) K i from the digital data VN. The 
data D{ml)Ki are sent to the encryption circuit 12 with 
public key K2 . 

The operation of encryption with public key K2 

20 of a datum D(ml) K i leads . to the calculation of an 
encrypted datum C { D (ml ) ki) K2 • 

According to the invention, fractions F2 (VN) of 
the digital signal VN are tapped off at the output of 
the demultiplexer 11. The tapping off of the fractions 

25 F2 (VN) is performed as a mirror image of the tapping 
off of the fractions Fl(VN). Thus, each fraction F2 (VN) 
corresponds to a fraction Fl(VN) and the data which are 
contained in the fraction F2(VN) which corresponds to 
the fraction Fl(VN) are data of the same type as the 

30 data contained in the fraction Fl (VN) . The expression 
Mata of the same type" should be understood to mean 
that the data which constitute the fraction F2 (VN) are 
data which are a priori identical to the data which 
constitute the fraction Fl(VN) which corresponds 

35 thereto: the data are identical if the fraction Fl(VN) 
has not been falsified and different, in whole or in 
part, if the fraction Fl(VN) has been falsified. 

In all cases, the data contained in a fraction 
F2(VN) represent the same signal as the data contained 



in the fraction Fl(VN) corresponding thereto. Thus, for 
example, if the data contained in a fraction Fl(VN) are 
made up of the even lines of an image, the data 
contained in the fraction F2 (VN) which corresponds to 
5 the fraction Fl(VN) are made up of the even lines of 
the same image. 

The circuit 13 operates the hashing of the data 
contained in the fractions F2 (VN) . The hashing 
operation performed by the circuit 13 is identical to 

10 that performed by the circuit 5. From this it follows 
that the datum m2 which is associated with a fraction 
F2(VN) corresponding to a fraction Fl(VN) is identical 
to the datum ml which is associated with the fraction 
Fl(VN) if the fraction Fl (VN) has not been falsified. 

15 The datum m2 emanating from the circuit 13 and the 
datum C(D(ml) K i)K2 are sent to the comparator 14. 

The signal S3 emanating from the comparator 14 
then makes it possible to indicate whether the digital 
data VN are authentic data or falsified data: these are 

20 data which can be regarded, as authentic if each datum 
m2 is equal to the datum C(D(ml) K i)K2 corresponding 
thereto, these are data where one is aware that they 
have been falsified if at least one datum m2 is 
different from the datum C(D(ml)Ki)K2 corresponding 

25 thereto. 

According to the invention, the device 10 for 
authenticating images can be incorporated into a 
control unit receiving images filmed by a camera head. 
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CLAIMS 



1. Device for authenticating the taking of 
pictures made up of digital data comprising a picture 

5 taking apparatus and a security element carrying out 
the signing of at least part of the digital data, 
characterized in that the security element is a 
detachable element comprising a decryption circuit with 
secret key Kl, this element being connected to the 
10 picture taking apparatus by an interface circuit 
provided in the picture taking apparatus. 

2. Device according to Claim 1, characterized in 
that the detachable element incorporates a hashing 
circuit. 

15 3. Device according to either of Claims 1 and 2, 

characterized in that the detachable element is a chip 
card. 

4. Device according to Claims 1 and 3, 

characterized in that the picture taking apparatus (1) 

20 moreover comprises a multiplexing circuit {6) and a 
circuit (5) for hashing at least one first fraction (Fl 
(VN) ) of the digital data in such a way as to generate 
a first hashed datum (ml) , the decryption circuit with 
secret key Kl of the chip card (2) carrying out the 

25 decryption of the first hashed datum (ml) in such a way 
as to generate a signature (D(ml) K i) of the first hashed 
datum (ml), the signature {D(ml) K i) and the digital data 
( VN) being transmitted to the multiplexing circuit (6) 
so as to constitute a multiplexed signal (SI) . 

30 5. Device according to Claims 2 and 3, 

characterized in that the picture taking apparatus (1) 
furthermore comprises a multiplexing circuit (6), a 
hashing circuit of the chip card carrying out the 
hashing of at least a first fraction (Fl(VN)) of the 

35 digital data originating from the picture taking 
apparatus (8) in such a way as to generate a first 
hashed datum (ml) and the first hashed datum (ml) is 
decrypted in the decryption circuit in such a way as to 
generate a signature (D(ml) K i) of the first hashed datum 



(ml), the signature (D(ml) K i) emanating from the chip 
card and the digital data (VN) being transmitted to the 
multiplexing circuit {6} in such a way as to constitute 
a multiplexed signal (SI) - 
5 6. Device according to Claims 1 to 5, 

characterized in that the picture taking apparatus (1, 
8) is a camera head. 

7. Device according to Claims 1 to 5,, 
characterized in that the picture taking apparatus (1, 

10 8) is a photographic apparatus. 

8. Device for authenticating digital data 
emanating from a device according to any one of 
Claims 1 to 7, characterized in that it comprises a 
demultiplexer (11) for separating the digital data (VN) 

15 and the signature (D(ml) K i) / an encryption circuit with 
public key K2 for calculating an encrypted datum 
(C(D(hi1)ki)k2) on the basis of the signature (D(ml) K i)r a 
circuit (13) for hashing at least one second fraction 
(F2(VN)) of the digital data (VN) emanating from the 

20 demultiplexer (11) in such a way as to generate a 
second hashed datum (m2), a comparison circuit (14) for 
comparing the encrypted datum (C ( D (ml ) ki) K2) with the 
second hashed datum (m2) in such a way as to constitute 
a signal (S3) making it possible to verify the 

25 authenticity of the digital data. 



ABSTRACT 



PROCESS FOR AUTHENTICATING DIGITAL IMAGES AND DEVICE 
IMPLEMENTING THE PROCESS 

The invention relates to a process for 
authenticating digital images as well as a system 
implementing the process. 

The system implementing the process comprises a 
picture taking device - camera or photographic 
apparatus - and a device for processing the information 
emanating from the picture taking device. 

The picture taking device comprises means for 
hashing and signing successive fractions of the filmed 
or photographed signal. The signal emanating from the 
picture taking device is constructed by multiplexing 
the plain signal and the hashed and signed signal 
fractions . 

The processing device comprises a demultiplexer 
for separating the hashed and signed data from the 
plain signal, means for hashing the signal fractions 
which correspond to the signal fractions which have 
been hashed and signed in the picture taking device, 
means for performing public-key encryption of the 
hashed and signed signal fractions, and means for 
comparing the signal fractions hashed in the processing 
device with the data emanating from the public-key 
encryption operation. 

The signal emanating from the comparator then 
makes it possible to indicate whether the digital 
images which have been filmed are authentic or 
falsified. 

The invention applies more particularly to news 
reporting cameras in the professional domain. 
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. claimed; 

Priority 

Prior Foreign AppHcatlon(s) _ Claimed 




on which priority is 



Number 



Country 



Date Filed 



Yes No 



I hereby 
insofar as the sul 
application in the 
disclose Information 
1.56(a). 

Serial No.: 



claim 
bjsct 



the benefit under 35 USC 120 of any US Application(s) listed; below, and, 
matter of each of the claims of this Application is not disclosed in! the prior US 
rfianner provided by the first paragraph of 35 USC 112, 1 acknowledge the duty to 
which is material to the examination of this application in accordance, with 37 CFR 



Filed: 



I hereby declare that all statements made herein of my own knowledge are trufe and that all 
statements made on information and belief are believed to be true; and further that these statements 
were made with tho knowledge that wilful false statements and the like so made are punishable by fine 
or imprisonment o - both, under of 18 USC 1001 and that such willful false statements may jeopardize 
the validity of the a jplicatton or any patent issued thereon. 

I hereby s ppoint the following attorneys to prosecute this application and to transact all 
business in the Patent and Trademark Office connected therewith: Joseph S< Tripoli (Reg. No. 
26,040), Peter M. Emanuel (Reg. No. 26,542), Eric Herrmann (Reg. No. 29,169) and Joseph J. Laks 
(Reg, No, 27,914) Telephone: (609) 734-9813. 

Address all correspondence to Joseph S. Tripoli, Patent Operations - Thomson multimedia 
Licensing, Inc. - CM 5312 - Princeton, New Jersey 08543-0028. 



Signature: 

Sole or First Joint Ifwentor: Sylvain Chevreau 
Citizenship: FR 

Residence and Po$i Office Address: 



Date: 



day of 



,2000. 



9 square du Roi Arthur 
F- 35000 Rennes 
France 



Signature: m 

Second Joint Inventor: Paul-Louis Meunier 
Citizenship: FR 

Residence and Po4t Office Address: 



Date: 



day of 



,2000. 



23 avenue du Dr Natter 
F-75012 Paris 
France 
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DECLARATION FOR UNITED STATES PATENT APPLICATION, 
POWER OF ATTORNEY, DESIGNATION OF CORRESPONDENCE ADDRESS 

As a below named inventor, I hereby declare that my residence, post office address and 
citizenship are as stated below next to my name, and that I believe I am the original, first and sole 
inventor (if only one name is listed below) or an original, first and joint inventor (if plural names are 
listed below) of the subject matter which is claimed and for which a patent is sought on the invention 
entitled 

DEVICE FOR AUTHENTICATING DIGITAL IMAGES 

the specification of which 

(CHECK ONE) ( ) is attached hereto. V ~ A ^ 

(xx) was filed on December 15, 199S^plicati^eriaL NO.PCT/FR98/02730 
and was amended on . *<«o&hPfr 

I hereby state that I have reviewed and understand the contents of the above identified 
specification, including the claims, as amended by any amendment referred to above. 

I acknowledge the duty to disclose information which is material to the examination of this 
application in accordance with 37 CFR 1.56(a). 

I hereby claim foreign priority benefits under 35 USC 119 of any foreign application(s) for 
patent, utility model, design or inventor's certificate having a filing date before that of the application(s) 
on which priority is claimed: 

Priority 

Prior Foreign Application(s) Claimed 

Number Country Date Filed Yes No 




m si 



I hereby claim the benefit under 35 USC 120 of any US Application(s) listed below, and, 
insofar as the subject matter of each of the claims of this Application is not disclosed in the prior US 
application in the manner provided by the first paragraph of 35 USC 112, ! acknowledge the duty to 
disclose information which is material to the examination of this application in accordance with 37 CFR 
1.56(a). 



Serial No. 



Filed: 



I hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these statements 
were made with the knowledge that wilful false statements and the like so made are punishable by fine 
or imprisonment, or both, under of 18 USC 1001 and that such willful false statements may jeopardize 
the validity of the application or any patent issued thereon. 

I hereby appoint the following attorneys to prosecute this application and to transact all 
business in the Patent and Trademark Office connected therewith: Joseph S. Tripoli (Reg. No. 
26,040), Peter M. Emanuel (Reg. No. 26,542), Eric Herrmann (Reg. No. 29,169) and Joseph J. Laks 
(Reg. No. 27,914) Telephone: (609) 734-9813. 

Address all correspondence to Joseph S. Tripoli, Patent Operations - Thomson multimedia 
Licensing, Inc. - CN 5312 - Princeton, New Jersey 08543-0028. 



Signature: 

Sole or First Joint Inventor: Sylvain Chevreau 
Citizenship: FR 

Residence and Post Office Address: 



Date: 



_day of_ 



,2000. 



9 square du Roi Arthur 
F- 35000 Rennes 
France 




Signature: 

Second Joint 
Citizenship: FR, 
Residence and Post Office Address 



Date: 2-2^ day of 



,2000. 



23 avenue du Dr Netter 
F-75012JParis pl^X 
France * ' 
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Signature: ; Date: day of ,2000. 

Third Joint Inventor: Rober Boyer 
Citizenship: FR 

Residence and Post Office Address: 5 Place de Seoul 

F-75014 Paris 
France 



Signature: Date: day of ,2000. 

Fourth Joint Inventor: Alain Staron 
Citizenship: FR 

Residence and Post Office Address: 74 rue de la Tour 

F-751 16 Paris 
France 
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DECLARATION FOR UNITED STATES PATENT APPLICATION, 
POWER OF ATTORNEY, DESIGNATION OF CORRESPONDENCE ADDRESS 

As a below named inverrtor, I hereby declare that my residence, post office address and 
citizenship are as stated below next to my name, and that I believe I am the original, first and sole 
inventor (if only one name is listed below) or an original, first and joint inventor (if plural names are 
listed below) of the subject matter which is claimed and forjjdilQha patent is sought on the invention 
entitled /Q I ^ ^ 

DEVICE FOR AUTHENTICATING DIGITAL IMAGES , ltn 

_ AUS 2 B 

the specification of which > : .; 

(CHECK ONE) ( ) is attached hereto. 

(xx) was filed on December 15, 199§ , ^ppji^tfon Serial. No.PCT/FR98/02730 
and was amended on . 

I hereby state that I have reviewed and understand the contents of the above identified 
specification, including the claims, as amended by any amendment referred to above. 

I acknowledge the duty to disclose information which is material to the examination of this 
application in accordance with 37 CFR 1 .56(a). 

I hereby claim foreign priority benefits under 35 USC 119 of any foreign application(s) for 
patent, utility model, design or inventor's certificate having a filing date before that of the application(s) 
on which priority is claimed: 

Priority 

Prior Foreign Application(s) Claimed 

Number Country Date Filed Yes No 




I hereby claim the benefit under 35 USC 120 of any US Application(s) listed below, and, 
insofar as the subject matter of each of the claims of this Application is not disclosed in the prior US 
application in the manner provided by the first paragraph of 35 USC 112, I acknowledge the duty to 
disclose information which is material to the examination of this application in accordance with 37 CFR 
1.56(a). 

Serial No.: Filed: 



I hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these statements 
were made with the knowledge that wilful false statements and the like so made are punishable by fine 
or imprisonment, or both, under of 18 USC 1001 and that such willful false statements may jeopardize 
the validity of the application or any patent issued thereon. 

I hereby appoint the following attorneys to prosecute this application and to transact all 
business in the Patent and Trademark Office connected therewith: Joseph S. Tripoli (Reg. No. 
26,040), Peter M. Emanuel (Reg. No. 26,542), Eric Herrmann (Reg. No. 29,169) and Joseph J. Laks 
(Reg. No. 27,914) Telephone: (609) 734-9813. 

Address all correspondence to Joseph S. Tripoli, Patent Operations - Thomson multimedia 
Licensing, Inc. - CN 5312 - Princeton, New Jersey 08543-0028. 

Signature: Date: day of ,2000. 

Sole or First Joint Inventor: Sylvain Chevreau 
Citizenship: FR 

Residence and Post Office Address: 9 square du Roi Arthur 

F- 35000 Rennes 
France 



Signature: Date: day of ,2000. 

Second Joint Inventor: Paul-Louis Meunier 
Citizenship: FR 

Residence and Post Office Address: 23 avenue du Dr Netter 

F-75012 Paris 
France 
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third Joint Inventor: Rober Boyer * 
Citizenship: FR 

Residence and Post Office Address: 5 Place de Seoul , r 

F-75014 _Paris. Y 
France 



Signature: Date: day of ,2000. 

Fourth Joint Inventor: Alain Staron 
Citizenship; FR 

Residence and Post Office Address: 74 rue de la Tour 

F-75116 Paris 
France 



Signature: 

Third Joint Inventofr: Rober Bqyer 
Citizenship: FR 
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Fourth Joint Invent|orf Alain St6ron 
Citizenship: FR 
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